MEDSECURANCE - Advanced Security-for-safety Assurance for Medical Device IoT

医疗保健IT系统的进步导致了复杂的社会技术架构，这些架构提供了以患者为中心的集成服务。所有这些转变，除了临床效益之外，也会带来风险，包括需要了解和管理的安全风险，将其降低到可接受的水平。关于这类体系结构的新型安全漏洞的报告很多，这对当前安全工具的有效性提出了挑战。MEDSECURANCE将构思新颖的方法、基础设施和技术，以实现医疗物联网（IoMT）中安全系统工程管理活动的有效、和谐和持续发展和演变。我们的目标是推进基于不同系统和组件级交互的不同IoMT威胁景观的决策制定的知识和基本理解。这是通过开发一种新的整体战略来实现的，该战略考虑了几个IoMT子系统、信息交换、风险阈值和监管分支之间的相互依赖性。我们提供可扩展且可验证的安全系统工程管理解决方案，这些解决方案可以捕获、通信并针对这些复杂性采取行动，从而在自动化网络安全保障的同时改善网络防御决策。我们的解决方案将与我们的医疗行业用户合作伙伴共同开发和验证，并由医疗行业利益相关者参与，以支持对现有指导方针的建议，这些建议也将在项目中制定。

Advances in healthcare IT systems have resulted in complex socio-technical architectures, which deliver integrated and patient-centered services. All these transformations, in addition to clinical benefits, they also introduce risks including security risks that need to be understood and managed, reduced to acceptable levels. There are numerous reports of new types of security vulnerabilities for this kind of architectures, which challenge the effectiveness of the current security tools. MEDSECURANCE will conceive novel methodologies, infrastructures, and technologies that enable an effective, harmonious and continuous development and evolution of secure system engineering management activities in Internet of Medical Things (IoMT). Our objective is to advance knowledge and basic understanding of decision making in diverse IoMT threat landscapes based on different system and component level interactions. This is accomplished via the development of a novel holistic strategy that considers the interdependence of several IoMT subsystems, information exchange, risk thresholds, and regulatory ramifications. We provide scalable and verifiable secure system engineering management solution(s) that capture, communicate, and act on these complexities in order to improve decision-making in cyber defence while automating cybersecurity assurance. Our solution(s) will be co-developed and validated with our medical industry user partners, and complemented by engagement of healthcare industry stakeholders in support of the recommendations to existing guidelines that will also be developed in the project.